Xerox WORKCENTRE 5735 - User Account and Passcode Security; User Account and Password Policies; Recommended Passcode Changes; Job Operation Rights and Authentication

XEROX WorkCentre 5735/5740/5745/5755/5765/5775/5790 Information Assurance Disclosure Paper
Ver. 2.00, March 2011 Page 3 of 50
1. INTRODUCTION ..................................................................................................................................5
1.1. Purpose .................................................................................................................................................................................... 5
1.2. Target Audience ................................................................................................................................................................... 5
1.3. Disclaimer ............................................................................................................................................................................... 5
2. DEVICE DESCRIPTION .......................................................................................................................6
2.1. Security-relevant Subsystems ......................................................................................................................................... 6
2.1.1. Physical Partitioning .......................................................................................................................................................................6
2.1.2. Security Functions allocated to Subsystems ........................................................................................................................7
2.2. Controller ................................................................................................................................................................................ 8
2.2.1. Purpose ................................................................................................................................................................................................8
2.2.2. Memory Components ....................................................................................................................................................................8
2.2.3. External Connections .................................................................................................................................................................. 10
2.2.4. USB Ports ......................................................................................................................................................................................... 10
2.2. Fax Module .......................................................................................................................................................................... 11
2.3.1. Purpose ............................................................................................................................................................................................. 11
2.3.2. Hardware ......................................................................................................................................................................................... 11
2.4. Scanner ................................................................................................................................................................................. 11
2.4.1. Purpose ............................................................................................................................................................................................. 11
2.4.2. Hardware ......................................................................................................................................................................................... 11
2.5. Graphical User Interface (GUI) ................................................................................................................................... 12
2.5.1. Purpose ............................................................................................................................................................................................. 12
2.5.2. Hardware ......................................................................................................................................................................................... 12
2.6. Marking Engine (also known as the Image Output Terminal or IOT) .......................................................... 13
2.6.1. Purpose ............................................................................................................................................................................................. 13
2.6.2. Hardware ......................................................................................................................................................................................... 13
2.6.3. Control and Data Interfaces .................................................................................................................................................... 13
2.7. System Software Structure ........................................................................................................................................... 13
2.7.1. Open-source components ......................................................................................................................................................... 13
2.7.2. OS Layer in the Controller ......................................................................................................................................................... 13
2.7.3. Network Protocols ........................................................................................................................................................................ 15
2.8. Logical Access ..................................................................................................................................................................... 16
2.8.1. Network Protocols ........................................................................................................................................................................ 16
2.8.2. Ports ................................................................................................................................................................................................... 17
2.8.3. IP Filtering ....................................................................................................................................................................................... 21
3. SYSTEM ACCESS ................................................................................................................................ 22
3.1. Authentication Model ..................................................................................................................................................... 22